Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: G63PGkcHnJiHxn9Ubo0908lTy4a0T+5GG96qPu7zLDQ=
Subject key identifier: 6A:0A:E7:E1:50:33:E2:C1:8F:80:F6:D0:71:12:DF:70:F1:F8:35:7C
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 3437888B011500F7B7E70E177C784FCADFFE4FC4
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS215304.roa
Signing time: Thu 28 Nov 2024 12:00:50 +0000
ROA not before: Thu 28 Nov 2024 11:55:50 +0000
ROA not after: Thu 27 Nov 2025 12:00:50 +0000
asID: 215304
IP address blocks: 140.99.43.0/24 maxlen: 24
140.99.45.0/24 maxlen: 24
140.99.47.0/24 maxlen: 24
140.99.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:37:88:8b:01:15:00:f7:b7:e7:0e:17:7c:78:4f:ca:df:fe:4f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Nov 28 11:55:50 2024 GMT
Not After : Nov 27 12:00:50 2025 GMT
Subject: CN=6A0AE7E15033E2C18F80F6D07112DF70F1F8357C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:f0:0b:d5:eb:ec:ad:2b:9a:a0:e1:1e:42:
4e:21:a1:80:5d:26:b3:7f:b6:ef:77:42:f3:27:69:
23:8d:ef:a9:d6:a4:e7:bf:f6:4f:76:2d:1f:f7:3e:
47:ad:2f:62:e9:2e:e2:67:b6:70:9e:29:4f:44:d5:
d8:79:42:3e:7f:c7:5b:51:32:87:17:e3:a2:ab:b7:
c9:61:82:eb:39:37:a8:40:b5:4c:e5:83:44:a7:6a:
ec:7e:25:05:0d:61:34:68:d6:e6:95:2f:62:ea:e2:
87:94:87:d2:b2:c9:e3:7c:e7:41:dd:2d:92:7a:a9:
68:12:cd:5d:60:4c:00:f1:fb:96:8c:a5:11:c6:8b:
22:49:44:08:df:20:41:8a:34:f4:b1:cb:83:9b:b7:
f8:25:a8:58:63:4b:b8:eb:79:02:5f:42:93:ef:16:
29:ae:d0:25:24:75:29:74:bf:be:b7:cb:5a:5d:a1:
0d:78:f0:1d:0d:71:6b:be:dc:7d:77:87:91:5d:bc:
78:a1:b2:b9:87:de:2a:7c:d9:b3:de:a3:85:aa:59:
97:5e:0d:fd:93:df:89:f2:81:69:fe:e9:a0:6f:f0:
07:3b:86:2a:a8:d4:b9:50:d3:33:41:71:f1:66:9c:
c8:ce:2a:62:c6:e9:26:e5:56:e3:6e:74:40:dc:e6:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:E7:E1:50:33:E2:C1:8F:80:F6:D0:71:12:DF:70:F1:F8:35:7C
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.43.0/24
140.99.45.0/24
140.99.47.0-140.99.48.255
Signature Algorithm: sha256WithRSAEncryption
c1:4f:bd:cc:b1:3d:55:c5:8d:22:80:fa:a8:b7:f9:89:f0:00:
1e:62:26:c8:63:43:20:04:31:a6:2b:ec:97:4a:16:65:92:6e:
4e:6c:f3:7b:16:6e:a7:f4:4b:0d:54:78:48:df:01:d3:66:78:
12:70:65:0c:e3:69:d6:f0:b4:49:b2:59:87:0e:99:90:40:e6:
ec:23:ef:55:2b:42:6d:79:d8:f9:1c:1c:93:79:18:21:6f:44:
85:a9:f9:8f:14:11:6b:f7:41:92:74:d7:5a:a9:91:9d:ef:6f:
82:70:a2:79:ab:13:d3:cf:79:96:b0:a1:7a:88:7c:6b:79:05:
99:33:be:fc:5b:ce:84:45:26:2c:9a:6d:a0:00:cb:78:87:79:
6e:80:ab:22:3a:37:39:d2:1d:8e:5b:65:9b:10:57:64:a9:47:
ef:76:6d:f2:8c:45:0d:3d:9f:53:7d:0b:e4:fa:19:da:61:10:
30:21:0a:9b:b0:7b:ad:0a:29:bf:f6:95:d1:55:b0:e3:93:95:
26:ad:8e:01:86:af:fe:04:e8:ab:28:54:2f:40:45:4f:66:22:
2e:9e:e0:3a:77:9f:31:21:34:72:37:86:ab:36:c0:d4:f3:00:
63:7d:90:71:7c:58:73:33:19:f3:ad:57:d6:f9:b0:e7:98:ad:
0e:85:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:07 2025 by rpki-client